Professional Documents
Culture Documents
1
PART VII – Web Services
2
7.1 Web Services
• "Web services are a new breed of Web application. They are self-contained,
self-describing, modular applications that can be published, located, and
invoked across the Web. Web services perform functions, which can be
anything from simple requests to complicated business processes. … Once
a Web service is deployed, other applications (and other Web services) can
discover and invoke the deployed service.” IBM web service tutorial
The notion of web services captures a recent technological development that aims at the
possibility to access services (i.e. applications) through the Internet infrastructure (i.e. Web
standards). Technologically they represent only a small change as compared to earlier
distributed computing standards, but the impact of this new technology is considered as
being very high as it facilitates automated distributed computing and information access by
taking advantage of the ubiquitously available Web infrastructure. In particular on-demand
use of software is considered as one of the important developments Web service technology
is going to support.
3
Web Services Design Principles
• Web-based Protocols
– Web-services based on HTTP
– protocols can traverse firewalls, can work in a heterogeneous environment
• Interoperability
– SOAP defines a common standard that allows different systems to interoperate
• XML-based (XML schema)
– machine-readable documents
• Modularity
– Service Components are useful in themselves, reusable, composable
• Availability
– Services are available to systems that wish to use them
– Services must be exposed outside of the particular system they are available in
• Machine-readable description
– used to identify the interface, the location and access information
• Implementation-independence
– Service interface available independent of the ultimate implementation
• Published
– Searchable service repositories of service descriptions
Here we summarize some of the design principles that underlie Web service technology.
Note that many of this principles also hold for other distributed computing technologies,
such as CORBA, but that the use of ubiquitously available Web technology makes the
infrastructure easier accessible and wider available.
4
Web Services Architecture
• Service-oriented architecture
"server"
Service provider
publish bind
(WSDL) (SOAP)
5
Web Service Stack
6
Basic Web Service Usage Scenario
2 http get
(manual) web
service lookup
Web Service
3 WSDL file Repository
(UDDI)
This figure illustrates a (possible) basic Web service usage scenario. A Web service
provider registers it's web service at a UDDI repository. This could be done manually
through a Web interface or through a UDDI API. He registers the description of the web
service which is given in WSDL. A potential user may, for example, manually look up in
the UDDI repository the Web service through http and obtain the WSDL file. This file
contains all the information needed in order to access the Web service. Based on this
information he/she implements a client application that makes use of the web service. When
the client application is executed it accesses the web service by using the SOAP protocol for
service invocation.
7
Web Services Implementation
SOAP
messages
(http transport)
The implementation of web services (in runtime) requires in particular the support of the
SOAP protocol on the server and the client site. At the server this support is provided by a
SOAP server that uses the HTTP server for transporting SOAP messages. The applications
implementing the service can be implemented in any implementation platform, ranging
from simple programming languages to application services, that support a web service
front-end. It is irrelevant what exactly the interface between the SOAP server and
application server is and to which degree exposing applications as web services is
automated (e.g. whether web services can be automatically generated from application
server components such as EJBs). These solutions are vendor-specific.
8
CORBA vs. Web Services
IDL WSDL
GIOP/IIOP HTTP
TCP/IP TCP/IP
It is interesting to compare the Web services stack with the CORBA stack. This clearly
shows that the two technologies address exactly the same problem using two different
approaches. Also observe that both technologies are based on TCP/IP thus are Internet-
based, but that they deviate already at the level of the transport protocol, where Web service
chose a WEB protocol, whereas CORBA is based on a protocol proprietary to the standard.
9
CORBA vs. Web Services
It is also interesting to compare in more detail of how CORBA and Web services address
specific technical issues.
Data Model: Web services model applications using a message-based paradigm, i.e. an
asynchronous communication model, modeled as message exchanges among endpoints
(service providers), whereas CORBA is based on synchronous model or strong coupling
between clients and servers, modeled as method invocations among objects.
Parameter passing: since Web services have no notion of objects also no references can be
passed. All data is passed by value.
Type Checking: CORBA supports both static (which is the standard) and dynamic type
checking (supported by static stubs/skeletons resp. by using the DII)
State: Since CORBA uses a synchronous communication model during the interaction a
common state is established. Web services are a priori stateless. However, there exist
extensions to implement stateful Web processes based on Web services (more on that later
in the part on workflows)
Service Discovery: The UDDI of Web services provides a substantially more powerful
approach to model and search Web services, as compared to Naming services in CORBA.
Serialization: With Web service the serialization of application data (in XML) can be
chosen by the user.
10
7.2 SOAP – Simple Object Access Protocol
• SOAP consists of
– Envelope construct: defines the overall structure of messages
– Encoding rules: define the serialization of application data types
– SOAP RPC: defines representation of remote procedure calls and responses
– Binding framework: binding to protocols such as HTTP, SMTP
– Fault handling
SOAP defines the protocol by which web services can be invoked. It supports both
simple messaging (as in message queuing approaches) and RPC-style
communication. It can be used over any transport protocol layer (such as HTTP,
SMTP). SOAP defines the basic structure of messages and encoding rules for data
types (used as parameters in procedure/method calls) and the encoding of procedure
calls and responses. SOAP also defines bindings to specific transport protocols most
notably to HTTP and SMTP.
SOAP is designed to also allow the implementation of advanced message
processing models, in particular the use of intermediaries. Intermediaries both can
just route messages, based on the content of the message, or do some additional
processing before routing the message.
11
SOAP Message
body
The basic structure of a SOAP message consists of a header and a body, both of which the
contents are application specific, i.e. not defined by SOAP. The differentiation is made to
distinguish information that is to be processed by all intermediaries (Header) and
information that is to be processed at the final destination (Body).
12
Example: SOAP Message
We highlight some specificities of the SOAP message model for this example. The
envelope is the mandatory top-level element of any SOAP message.
The header relates to information on authentication, transaction management,
payment etc. needed for processing the message and during transport. Elements in
the header contain SOAP-specific attributes (recognizable as belonging to the env
namespace) which are used to determine which type of processing is expected by
intermediaries and endpoints. This example shows of how the header is used in
order transmit certain transactional properties that are required for the service
invocation.
The body contains the request, which consists of a travel itinerary in this case. That
is, this message is not corresponding to a method invocation but to a simple
message transfer.
13
Conversational Message Exchanges in SOAP
proposed
itinerary
alternatives
choice
Having simple informational messages as in the previous example, using SOAP, one can
implement conversational message exchanges such as illustrated in this example. Such
exchanges can for example be used to model a negotiation process between a seller and a
customer.
14
SOAP RPC
SOAP also standardizes the way of how request/response interactions are to be represented
within a SOAP message. Note that this type of interaction does not exactly correspond to
the classical concept of RCP, since it is implemented asynchronously (no common state),
but is called RPC in the SOAP standard and is supposed to be used to access services in an
RPC style.
The example shows of a how a request is represented: the (application-specific) method
name (chargeReservations) occurs as top element in the message Body. The (application-
specific) parameters are then to be included as subelements of the method element. SOAP
also specifies of how to encode various data types. We will not go into these details of the
standard in the following.
The Header of the message can be used to include information that is necessary to properly
process the request: in this example it is used to state that the message is to be performed as
part of a transaction, with a given TID. Note that also the encoding of this processing
information is not standardized by SOAP but by the applications, resp. systems, using the
SOAP message format.
15
SOAP RPC
Similarly as the request also the response is encoded. In the response the method result is
represented by an application specific top element in the message Body, which again
includes one or more output parameters as sub-elements. In order to model functions SOAP
provides an alternative representation of response messages allowing to distinguish a
function result value as a special element.
16
SOAP Processing Model
We now explain in more detail the meaning of the SOAP-specific attributes that are used in
the elements occurring in the Header element. The role attribute is considered by the
receiver of the message and concerns the capability of the receiver to process the
(application-specific) information in the SOAP message. If its value is set to "next" this
implies the every receiving node must be capable of processing the header, whereas the
value "ultimateReceiver" implies the capability to also process the message body.
The "mustUnderstand" attributes can be used to control the processing of the header. Note
that being capable of processing the header does not necessarily imply that the header will
be processed. The "relay" attribute can in the case processing is not done, require to forward
the message to another SOAP node.
17
Protocol Binding
HTTP/1.1 200 OK
Content-Type: application/soap+xml; charset="utf-8"
Content-Length: nnnn
HTTP response
<?xml version='1.0' ?>
<env:Envelope xmlns:env="http://www.w3.org/2002/12/soap-envelope" >
… SOAP response message …
</env:Envelope>
SOAP also standardizes the binding of SOAP messages to specific transport protocols, in
particular to HTTP. Essentially it prescribes of how the transport protocols are to be used to
perform SOAP message exchanges. A possible way of how such a binding looks like for
HTTP is given in the example. Specifically this type of binding requires the use of HTTP
POST to transmit a request and to use the corresponding HTTP response to transmit the
response associated with the request.
18
7.3 WSDL – Web Service Description Language
(protocol) Binding:
Operations concrete protocol
concrete
Port: Binding and Service: collection
a network address of related ports
WSDL describes web services in terms of the services offered and the endpoints
that offer the services. Using the WSDL specification of a web service a client is
able to construct the necessary SOAP messages in order to access the service, to
send the message to the required network location, as well as to correctly interpret
the responses.
WSDL distinguishes the abstract and concrete specification of a service. The
abstract part specifies the type of data used in the parameters, the types of messages
exchanged during an operation, and the operations themselves, which might require
the exchange of multiple messages. Since a Web service might consists of a set of
operations supported (e.g. a travel reservation service might offer operations to
check itineraries, book flights and payment) multiple operations can be bundled in
so-called portTypes.
The concrete specification of the service concerns the transport protocol used and
the necessary binding (e.g. to SOAP) and the network addresses where the service is
offered (called ports). Again the same service may be offered at multiple physical
sites, therefore a set of ports can be specified to define the service.
This organization is also reflected in the structure of a WSDL document. The
vertical arrows in the figure correspond to references made within a WSDL
document through a "name" attribute (thus they are "refersTo" relationship) whereas
the horizontal arrows correspond to sub-element relationships in the WSDL
document.
19
Overview of Defining WSDL Services
1. Define in XML Schema the message types used when invoking the service:
MT1, MT2 etc.
2. Define (named) messages by using these types, e.g.
• message m1 has type MT1
• message m2 has type MT2 etc.
3. Define Services that consist of one or more operations; each operation is
implemented by the exchange of messages
• service S offers operation O1; for executing O1 first send a request message m1,
then a response message m2 is returned
4. Define a Binding B to a specific protocol, e.g. SOAP
• service S is implemented in SOAP; the SOAP messages are constructed from the
abstract messages m1 and m2 by, e.g. inlining the message as body of SOAP
messages
5. Service S is provided with binding B at the following URI's (called ports)
To better understand the role of the different parts of a WSDL document, we sketch here the
typical steps that would be taken in completely defining a Web service using WSDL.
20
Example: Overall Document Structure
<?xml version="1.0">
<definitions name="StockQuote>
<types>
<schema>
definition of types in XML Schema …………
</schema>
</types>
<message name="GetTradePriceInput">
definition of a message....
</message>
<portType name="StockQuotePortType">
<operation name="GetLastTradePrice">
definition of an operation ………
</operation>
</portType>
<binding name="StockQuoteSoapBinding">
definition of a binding ………
</binding>
<service name="StockQuoteService">
<port name="StockQuotePort">
definition of a port ………
</port>
</service>
</definitions>
©2004, Karl Aberer, EPFL-SSC, Laboratoire de systèmes d'informations rèpartis
This is an overview of the syntactical representation of a service in WSDL. For each of the
main parts (data, messages, portTypes, Service) a separate top element is used (outer boxes).
Within this subelements represent collections of specifications, such as the set of operations
belonging to a portType. These are indicated by the inner boxes.
21
Example: Definition of Types
This example shows the type definition of a WSDL specification. The types are
defined using the XML Schema language. In this example two data types are
defined as complex types. XML document (fragments) corresponding to these types
will be used as parameters of the web service.
22
Example: Definition of Messages and PortType
This (fragment of a) WSDL specification refers to the type definitions before. Two
messages are defined. The part elements of a message allow to associate with the
message one or more types that have been defined before in the type specification.
Each part obtains an individual name and refers to a type.
A portType consists of one or more operations. Each operation requires two
messages, one for the request (input) and one for the response. The messages are
referred to by their names.
This example illustrates of how a WSDL definition can be decomposed into
multiple documents: the type definitions from the previous slides are imported into
the document using the import element (rather directly inlined into the document,
which also would be possible).
Note that all element and attribute names in this example are WSDL-specific, i.e.
defined in the WSDL schema (which is given as an XML Schema)
23
Example: Definition of Binding and Service
This WSDL specification completes the example. It refers to the specification on the
previous slide. In the binding element it binds the port type GetLastTradePrice
(which is the abstract service) to a concrete protocol, namely the SOAP protocol and
thus defines the message format. In the service part the binding StockQuoteBinding
(which is the abstract service definition together with a concrete transport protocol)
is bound to a specific access point, given as URL, resulting in a port. This single
port then constitutes the concrete service.
We do not detail the rules of how the binding between the abstract operation
specification and its corresponding SOAP operations is established. Essentially
using the syntax given above the input/output messages are mapped to SOAP
request/response messages, and the SOAP message body is derived from the XML
types associated with the messages in the abstract specification.
24
PortTypes
– request/response:
<wsdl:definitions .... >
<wsdl:portType .... > *
<wsdl:operation name="nmtoken" parameterOrder="nmtokens">
<wsdl:input name="nmtoken"? message="qname"/>
<wsdl:output name="nmtoken"? message="qname"/>
<wsdl:fault name="nmtoken" message="qname"/>*
</wsdl:operation
</wsdl:portType >
©2004, Karl </wsdl:definitions>
Aberer, EPFL-SSC, Laboratoire de systèmes d'informations rèpartis
25
7.4 UDDI – Universal Description Discovery and
Integration
• Standard for describing, publishing and finding web services
– Still evolving
– Use XML-based description files for services
• Main components
– White pages: basic contact information about an organization
– Yellow pages: classification of organization based on industrial categorization
– Green pages: technical description of services offered by registered organizations
26
Registering a WSDL Service in UDDI
1. Register a business
2. Register the abstract service definition (tModel)
3. Register the service implementation definition (BusinessService)
27
Step 2: Registering a Abstract WSDL Service Definition
<?xml version="1.0">
tModel
<definitions name="StockQuote>
<types>
<schema> <?xml version="1.0">
definition of types <tModel tModelKey="…">
</schema> <name>StockQuote</name>
</types> …
<message name="GetTradePriceInput"> <overviewDoc>
definition of a message <overviewURL>
</message>
http//…
<portType name="StockQuotePortType">
<operation name="GetLastTradePrice"> </overviewURL>
definition of an operation ………
</operation> <categoryBag>
</portType> <keyedReference tmodelKey="…"
<binding name="StockQuoteSoapBinding">
keyName="uddi-org:types"
definition of a binding ………
</binding> keyValue="wsdlSpec">
<service name="StockQuoteService"> </categoryBag>
<port name="StockQuotePort"> </tModel>
definition of a port ………
</port>
</service>
</definitions>
Registering a service requires two steps: the registration of the abstract description and the
registration of the service implementation-related information. The abstract definition is
captured by the so-called tModel (another XML document type). It allows to provide the
UDDI registry with the information on the service name (i.e. it's identification) and it's
abstract specification, by referring to a WSDL document. The figure illustrates of how this
association is syntactically represented in XML. UDDI provides for every service
representation standard a model for registering the description, though WSDL is apparently
the only relevant one at the given time.
28
Step 3: Registering a Service Implementation
<?xml version="1.0">
<definitions name="StockQuote>
<?xml version="1.0">
<binding name="StockQuoteSoapBinding" <businessEntity businessKey="…">
type="tns:StockQuotePortType"> …
<soap:binding style="document" <businessService serviceKey"…"
transport="http://schemas.xmlsoap.org/soap/http"/> <name>StockQuote</name>
<operation name="GetLastTradePrice"> …
<soap:operation <bindingTemplates>
soapAction= <bindingTemplate>
"http://example.com/GetLastTradePrice"/> <accessPoint urlType="http">
<input> http://example.com/stockquote
<soap:body use="literal"/> </accessPoint>
</input>
<output> <tModelInstanceDetails>
<soap:body use="literal"/> …
</output> <overviewDoc>
</operation> <overviewURL>
</binding> http://...
</overviewURL>
<service name="StockQuoteService"> </overviewDoc>
<documentation>My first service</documentation> …
<port name="StockQuotePort" </tModelInstanceDetails>
binding="tns:StockQuoteBinding"> </bindingTemplate>
<soap:address </bindingTemplates>
location="http://example.com/stockquote"/>
</port> </businessService>
</service>
</definitions> </businessEntity>
Similarly, the concrete implementation of the service is registered (as part of the business
service description) by referring to a WSDL document. For the registration of the
implementation, in particular the physical address at which the service is accessed, which is
found in the port definition in the WSDL specification, is included in the UDDI service
description as shown in the example. Again the UDDI service description then refers for the
details of the service binding to the WSDL document.
29
Demo
https://uddi.ibm.com/testregistry/registry.html
30
Summary
• The current standards include SOAP for communication, WSDL for service
specification, and UDDI for service discovery
31
References
• Standard documents
– http://www.w3.org/2002/ws/
– http://www.w3.org/TR/2002/CR-soap12-part0-20021219/ (SOAP primer)
– http://www.w3.org/TR/SOAP/
– http://www.w3.org/TR/wsdl
– http://www.uddi.org
• Articles
– http://www2002.org/CDROM/alternate/395/ (Comparison to CORBA)
32